Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!


https://github.com/berzerk0/Probable-Wordlists

fire Everything awesome about web-application firewalls (WAF).

https://github.com/0xInfection/Awesome-WAF

PhpSploit is a remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server. It is a post-exploitation tool capable to maintain access to a compromised web server for privilege escalation purposes.

https://github.com/nil0x42/phpsploit

Automated Security Testing For REST API's

https://github.com/flipkart-incubator/Astra

A collective list of public JSON APIs for use in security.

https://github.com/daehee/security-apis

WebPwn3r - Web Applications Security Scanner.

https://github.com/zigoo0/webpwn3r

Search engines for Hackers:

https://censys.io
https://shodan.io
https://viz.greynoise.io/table
https://zoomeye.org
https://wigle.net
https://publicwww.com
https://hunter.io
https://haveibeenpwned.com
https://thispersondoesnotexist.com
https://osintframework.com

Slides :
https://drive.google.com/file/d/19UgHHSK8RsYz99xr8E9tFc7bsboIJHe1/view?fbclid=IwAR2qR5txpLrKgrPgl0GLiFPlmqPtweTEQwHqY0PoGrIE3gQFzjKWxcpHj5k
Video :
https://youtu.be/X0mV9HXbKHY

CORS Misconfiguration Scanner

https://github.com/s0md3v/Corsy

Bugcrowd University is a free and open source project to help level-up our security researchers. It includes content modules to help our researchers find the most critical and prevalent bugs that impact our customers. Each module will have slide content, videos, and labs for researchers to master the art of bug hunting. As time goes on we hope the community will help us curate BCU and create a new standard for security testing training!
https://github.com/bugcrowd/bugcrowd_university

Advanced Recon Automation (Subdomains) case 1
https://medium.com/soulsecteam/advanced-recon-automation-subdomains-case-1-9ffc4baebf70

Expanding your scope (Recon automation #2)

https://poc-server.com/blog/2019/01/31/expanding-your-scope-recon-automation/